Prior authorization in Medicare Advantage is the plan's mechanism for reviewing whether a service is medically necessary before it is delivered. CMS finalized rule CMS-4201-F in April 2023, with most provisions effective January 2024, setting new timelines, restricting PA in post-acute transitions, and requiring gold-carding programs across all Medicare Advantage plans for the first time. What the rule actually changes, and what it does not, determines how brokers explain PA risk to clients choosing between Medicare Advantage and Original Medicare plus a Medigap supplement.
Key Takeaways
- CMS finalized rule CMS-4201-F in April 2023, effective January 2024. It restricts prior authorization for post-acute care transitions and establishes gold-carding and expedited review standards across all Medicare Advantage plans.
- Skilled nursing facility admissions for the first 3 days after a qualifying hospital stay cannot be subject to PA under the 2024 rule. Plans that applied PA in this window before the rule did so at a compliance risk.
- Standard PA decisions must arrive within 7 calendar days. Urgent care PA must be decided within 72 hours. These are enforceable timelines, not targets.
- CMS now publishes PA approval and denial rates by plan, by service category, annually. Brokers comparing plans for high-utilization clients have access to real PA burden data rather than anecdotal reports.
- The IRO appeal timeline is 72 hours for urgent cases and 30 days for standard cases. An IRO overrule of a plan denial is final and binding on the Medicare Advantage plan.
What the 2024 rule changed and what it left in place
The rule's most significant protection applies to the post-acute transition that produces the highest volume of surprise PA denials: the skilled nursing facility admission following an inpatient hospitalization. Under Original Medicare, a beneficiary admitted to an SNF within 30 days of a qualifying 3-day hospital stay receives SNF coverage without a PA requirement. Medicare Advantage plans had historically been able to impose their own PA review at this exact moment, when a beneficiary was actively transitioning out of a hospital bed. The 2024 rule eliminated PA for the first 3 days of that SNF stay, aligning MA coverage with the Original Medicare baseline.
What the rule did not eliminate: prior authorization for most scheduled services remains at each plan's discretion. Imaging, specialist visits, durable medical equipment, certain surgical procedures, and outpatient therapies can still require PA under virtually any Medicare Advantage plan. The rule strengthened the procedural guardrails around PA without narrowing the categories of services subject to PA review.
The gold-carding provision addresses the administrative burden on providers who routinely receive PA approvals for the same services. A cardiologist whose PA requests for cardiac catheterization are approved 93 percent of the time over a 12-month period would qualify for gold-card status at a plan using a 90 percent threshold. Once gold-carded, the provider submits the same services without prior review. Clients whose specialists hold gold-card status experience fewer delays; clients with specialists who do not are still subject to the full PA process.
Decision timelines and what happens when a plan misses them
The 2024 rule codified PA decision timelines that had previously existed in CMS guidance without the same regulatory force. Standard pre-service PA requests must receive a decision within 7 calendar days. Urgent requests, defined as cases where a standard timeline would seriously jeopardize the beneficiary's life or health, must receive a decision within 72 hours. Concurrent review, which covers active ongoing services, has a 1-day expedited timeline when a plan proposes to reduce or terminate services the beneficiary is currently receiving.
When a plan misses a decision deadline, the request is deemed approved by operation of regulation. A plan that fails to issue a denial within 7 days on a standard PA request cannot subsequently deny the claim for the same service on medical necessity grounds. Brokers and clients who encounter a delay approaching the 7-day mark should document the submission date and follow up in writing with the plan's PA department, creating a paper trail that records the submission timeline if a deemed-approval argument becomes necessary.
| Request type | Decision deadline | First appeal type | Appeal deadline |
|---|---|---|---|
| Standard pre-service PA | 7 calendar days | Plan-level reconsideration | 30 days |
| Urgent pre-service PA | 72 hours | Expedited plan reconsideration | 72 hours |
| Concurrent review (ongoing care) | 1 calendar day (expedited) or 7 days (standard) | Immediate Qualified Independent Contractor review available | Immediately upon service reduction notice |
| Post-service claim denial | N/A (retroactive review) | Plan-level redetermination | 60 days from denial notice |
Timelines reflect CMS-4201-F provisions effective January 2024 and the Medicare Advantage appeals framework under 42 CFR Part 422. Specific plan timelines may be shorter. Verify with the plan's Evidence of Coverage.
How to use CMS PA denial rate data in plan comparisons
CMS has required Medicare Advantage plans to report prior authorization approval and denial rates by service category as part of the 2024 rule's transparency provisions. This data is released annually alongside plan Star Ratings. For a broker comparing two plans for a client with chronic conditions requiring regular specialist visits or imaging, the PA denial rate differential can be more predictive of the client's real-world experience than the plan's premium or copay structure.
Example: a client managing COPD and diabetes in a metro area with two competing HMO plans. Both plans carry a $0 monthly premium and similar cost-sharing. Plan A's publicly reported PA denial rate for pulmonology services is 9 percent; Plan B's is 22 percent. For a client who sees a pulmonologist four times per year, Plan B's denial rate means roughly one PA denial per year on average, triggering an appeal process that can run 30 days. That delay is not reflected in the premium, the copay, or the formulary comparison. Quotit's plan comparison view does not surface this data. Brokers who retrieve it from CMS files and present it to clients with high-utilization diagnoses provide a materially different level of service than a premium-only comparison delivers.
Illustrative example. Actual PA denial rates vary by plan, year, and service category. Verify current rates through CMS Medicare plan landscape files before client presentation.
For the broader comparison of Medicare Advantage versus Original Medicare plus a Medigap supplement, particularly for clients with chronic conditions where PA burden is a recurring factor, see Medicare Advantage vs Original Medicare plus Medigap for chronic conditions.
The appeals process when a PA denial arrives
When a plan denies a PA request, the denial must include a specific clinical reason and notice of appeal rights. The first appeal is a plan-level reconsideration, due within 30 days for standard cases and 72 hours for expedited cases. If the plan upholds the denial at reconsideration, the beneficiary can escalate to the Qualified Independent Contractor level and, if still unsuccessful, to the independent review organization.
IRO decisions are made by CMS-contracted entities that have no contractual or financial relationship with the Medicare Advantage plan. An IRO ruling that overturns a plan denial is binding: the plan must cover the service and cannot appeal the IRO decision in the same case. The beneficiary has 60 days from the plan-level denial to request IRO review. For expedited cases, IRO review must be completed within 72 hours of receipt of the case.
Brokers who support clients through PA denials perform a function that carriers do not advertise and that plan comparison tools from companies like Connecture do not incorporate into their plan recommendation workflow. Knowing the timeline, the escalation path, and the documentation requirements is what separates a broker from a plan-finder.
For the full scope-of-appointment documentation requirements that apply every time a broker meets with a Medicare beneficiary to discuss plan options, including clients navigating a PA denial mid-year, see Medicare Scope of Appointment: the 48-hour rule and what documentation survives an audit.
Broker action items before and after enrollment
Before enrolling a client in Medicare Advantage, three PA-related checks belong in the enrollment conversation. First, confirm whether the client's primary care physician and any specialists they see regularly are in-network and whether any of them hold gold-card status at the plan. The plan's PA department can answer the gold-card question directly. Second, review the plan's Evidence of Coverage for the service categories subject to PA and identify any that align with the client's known medical needs. Third, check whether the CMS-published denial rate for those categories at that plan is materially higher than at competing plans in the same service area.
After enrollment, if a client calls with a PA denial, the broker's first action is to request the denial in writing, confirm the denial includes a specific clinical reason rather than a generic medical necessity determination, and document the date of original PA submission to confirm the plan met its 7-day or 72-hour timeline. A plan that issued a denial after its regulatory deadline has already created a due-process argument in the beneficiary's appeal.
The QuoteTurbo plan finder surfaces live CMS Marketplace data for ACA plans and includes built-in APTC and subsidy math. For brokers whose ACA clients also carry Medicare-eligible spouses or are approaching T65, the subsidy calculation informs the Medicare timing conversation.
Medicare Advantage prior authorization: broker questions
Common questions from brokers about how prior authorization works in Medicare Advantage and what changed in 2024.
What exactly did the 2024 CMS prior authorization rule change for Medicare Advantage?
CMS rule CMS-4201-F, finalized in April 2023 and effective January 2024, made four core changes. First, MA plans cannot require PA for post-acute skilled nursing care during the first 3 days of a qualifying inpatient hospitalization, the same protection Original Medicare provides automatically. Second, plans must implement gold-carding programs that waive PA for providers with a sufficiently high historical approval rate for a given service, reducing administrative burden for frequent and predictable approvals. Third, PA decision timelines became stricter: 72 hours for urgent requests and 7 calendar days for standard requests. Fourth, plans must report approval and denial rates by service category to CMS annually, making that data publicly accessible for the first time.
How does gold-carding work in Medicare Advantage?
Gold-carding is a provision in the 2024 rule requiring MA plans to waive prior authorization requirements for providers whose historical PA approval rate for a specific service meets the plan's threshold. The rule does not set a universal threshold, giving plans discretion to set their own approval-rate cutoffs, but the intent is to eliminate repetitive PA requests from providers who almost always receive approval. A specialist who receives approval on 95 percent of PA requests for a given procedure over a 12-month period would typically qualify for gold-card status, allowing future requests for that service to bypass PA entirely. Gold-card eligibility is plan-specific and service-specific, and a provider who qualifies at one plan does not automatically qualify at another.
Can a Medicare Advantage plan still deny a claim after PA is approved?
Yes, and this is a critical distinction brokers must explain clearly at enrollment. Prior authorization approval means the plan agreed the service was medically necessary based on the submitted request. It does not guarantee payment of the final claim. Carriers can still deny payment if the actual service delivered differs from the approved request, if documentation is incomplete, or if the claim contains billing errors. Clients who receive a PA approval should keep a copy of the approval letter and the approval number. When a claim is denied after PA approval, the broker's first step is to compare the PA approval letter to the denial reason code, because those two documents together usually identify the specific administrative error or care delivery discrepancy.
What is the independent review organization appeal and when is it available?
The independent review organization appeal is the third level of the Medicare Advantage appeals process. A beneficiary who receives a service denial must first request a plan-level reconsideration. If the plan upholds the denial, the beneficiary can request an independent review. The IRO is a CMS-contracted third party with no financial relationship to the Medicare Advantage plan. IRO decisions are made within 72 hours for expedited cases and 30 calendar days for standard cases. An IRO decision overturning a plan denial is binding, meaning the plan must cover the service. The beneficiary has 60 days from the date of the plan-level denial notice to request IRO review. Missing the 60-day window generally waives the IRO appeal right unless good cause is established.
How should brokers use CMS prior authorization data when comparing Medicare Advantage plans?
CMS publishes annual MA plan PA data through the Medicare Advantage Prescription Drug landscape files and plan-level reporting released alongside Star Ratings. For clients with high-utilization conditions, a broker comparing two plans with identical premiums and cost-sharing should also compare their PA denial rates for the relevant service categories, such as specialist visits, imaging, durable medical equipment, or skilled nursing. A plan that denies 18 percent of PA requests versus one that denies 6 percent will produce meaningfully different experiences for a client who sees multiple specialists regularly. The data is not embedded in plan finder tools from Quotit or Connecture, which means brokers who do this research manually hold a differentiated service point for complex clients.
